Privacy Policy | SpryLearning

SpryLearning (“Spry”, “we”, “us”, “our”) builds a primary-years learning experience for children, families, teachers, and schools, aligned to the Australian Curriculum (V9) for Foundation (Prep)–Year 6. Spry is delivered as a web application at sprylearning.com.au and as a tablet app for iPad and Android, both running on Google Firebase. This policy explains what personal information we collect, why, how we use and share it, and the choices you have. It aligns with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), and we apply comparable protections for families, schools, and learners outside Australia.

Because Spry is used by different people, this policy includes role-specific sections for parents and guardians, children and learners, teachers, and school administrators and coordinators. If a role-specific section conflicts with a general section, the role-specific section applies to that role.

Who controls your information

Spry acts as the data controller (or “APP entity”) for personal information collected through consumer (family) accounts. Where a school, teacher, or coordinator loads or manages student information as part of a class or roster, the school is generally responsible for the underlying student records, and Spry processes that information on the school’s behalf. In those arrangements the school is responsible for obtaining any consents or notices required of it, and Spry handles the data consistently with this policy and any written agreement with the school.

The accounts and roles we support

Spry is designed so that an adult account holder creates and supervises accounts. Children never create their own accounts. The roles we recognise are:

Parent / guardian — creates child profiles, runs baselines, opens “Learn as [child]”, and manages the subscription.
Teacher — creates a class roster of students, marks topic progress for a class, and can invite same-organisation assistant teachers.
Coordinator — an education / curriculum coordinator with school-level oversight of classes and content where enabled.
Administrator — a SpryLearning internal administrator who maintains content, usage views, and platform operations.
Student / child — a learner using a supervised profile under a parent’s session or a teacher-managed class.

Information we collect

Account details — name, display name, email address, password (stored and verified by Firebase Authentication; we do not see your plain-text password), and role. Teachers and coordinators also select a school and we associate their email domain with that school’s directory entry.
Child & student profile details — a child’s first name (or nickname), chosen avatar and theme, year level, and an optional date of birth. For teacher-created student records only: an optional external student ID, an optional class / home-group label, and optional guardian email addresses used to link a parent who later signs up. We ask account holders to avoid entering a child’s full legal name.
Learning activity — quiz attempts, baselines, topic progress, coins, trophies, unlocked and active characters and themes, video watch progress, reading activity, and a teacher’s per-topic class status marker.
Support and communications — messages you send us and the contents of support requests.
Technical data — device type, operating system, app version, and diagnostic logs and error reports used to keep the service reliable and secure.
Subscription data — subscriptions are billed through the Apple App Store or Google Play, which process your payment and share only the limited entitlement information we need to unlock content. We do not collect or store your full payment-card details.

How we use information

To provide, personalise, and improve the learning experience and learning path.
To show parents, teachers, coordinators, and schools meaningful progress.
To maintain security, prevent abuse, and troubleshoot problems.
To process subscriptions and manage entitlements through the relevant app store.
To respond to support requests and send essential service messages.
To comply with legal obligations and enforce our Terms.

Children’s privacy

We do not show children behavioural or third-party advertising, and we do not sell children’s personal information. Learning content and rewards are not used to profile children for marketing, and children use supervised profiles created by an adult — they cannot create their own accounts or initiate purchases. Where applicable, we comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and the EU GDPR provisions concerning children, relying on verifiable account-holder consent and supervision.

Parents and guardians

We collect your name, email, password (via Firebase), and role, and we collect the profile and learning-activity data above about your children, created and supervised by you.

A family subscription covers up to 6 child profiles per adult, each with its own profile, year level, progress, and rewards.
You can view and manage your children’s profiles and progress from your account, and use “Learn as [child]” to open the kids experience.
You control what is entered in a child’s profile — please use a first name or nickname rather than a full legal name where possible.
If a teacher invited you by listing your address as a guardian on a class roster, signing up with that email may link your account to your child’s existing student record. Contact us if you do not want that link.
You can access, correct, or delete your account and your children’s profiles at any time — see our data deletion page.

Children and learners

Children use Spry through a supervised profile created by a parent, guardian, teacher, or school; they do not enter payment details and cannot buy anything.
We collect only what the learning experience needs: a first name/nickname, year level, chosen avatar/theme, and learning activity.
Children are never shown third-party advertising, and a child’s information is never sold.
Curated educational videos and reading material may be embedded from third-party platforms (for example, YouTube); when content plays, that platform may receive technical information as described in its own privacy policy.
A supervising adult can review, correct, or delete a child’s profile and activity at any time.

Teachers

We collect your name, email, password (via Firebase), role, and the school you select, and we associate your email domain with that school’s directory record to help connect colleagues at the same organisation. When you build a class, you may create student records and provide, per student, first and last name, year level, an optional external student ID, an optional class/home-group label, and optional guardian email addresses.

Student records you create are owned by your teacher account and used to show class rosters and per-topic class status, and to link guardians who later sign up.
You may invite assistant teachers by email, limited to colleagues at the same organisation; once an invited colleague signs in, they gain roster access to that class.
You are responsible for ensuring you have the authority and any consents required by your school before adding students or guardian emails.
Class settings such as class times can affect the learner experience (for example, optional in-class game restrictions during configured weekday windows) and are operational, not behavioural profiling.

Spry processes student information you load on behalf of your school. If you leave a school or a class is removed, contact us or your administrator about transferring or deleting the associated records.

School administrators and coordinators

Spry maintains a reference directory of Australian schools (sourced from ACARA / My School-style public data) to support teacher and coordinator school selection at sign-up. This directory contains institutional information, not student data.
Where a school adopts Spry, student records loaded by your teachers are processed on the school’s behalf; the school remains responsible for the lawful basis and any notices or consents required of it.
Coordinators with school-level access (where enabled) can see class and progress information within their school’s scope only.
We are happy to enter into a written data-processing or school agreement covering roles, data handling, security, retention, sub-processors, and deletion on termination — contact us at the schools address below.
On termination of a school arrangement, we will, on request and subject to legal retention requirements, return or delete student information processed on the school’s behalf.

How we share information

We share personal information only as needed to run Spry: with trusted service providers (most notably Google Firebase for authentication, database, storage, functions, and hosting, plus email and diagnostics support), with the app store that processes a subscription, with third-party content platforms when curated videos or reading content are displayed, within a family or class to the supervising account holder or school, and where required by law or to protect users and the service. We do not sell personal information, and we do not share children’s information for third-party advertising.

Data storage, location, and security

Information is stored using Google Firebase and may be processed on servers located outside your country, including outside Australia. Where we transfer information overseas, we take reasonable steps to ensure it is handled consistently with the APPs and this policy. We use industry-standard safeguards including encryption in transit, access controls, and server-side security rules that enforce parent/child, teacher/class, and school boundaries. No system is perfectly secure, but we work to protect your information and to notify you of any eligible data breach as required by law.

Your rights and choices

Access the personal information we hold about you and the children or students you supervise.
Correct or update account and profile information from your account.
Request deletion of your account and associated data — see our data deletion page.
Object to or restrict certain processing, or withdraw consent, where applicable law provides that right.
Contact us, and a privacy regulator (in Australia, the Office of the Australian Information Commissioner), with privacy questions or complaints.

Data deletion and retention

You can delete your account and the personal information associated with it — including any child profiles you manage — from within the app or by email. We delete your account profile, child/student profiles you created, learning activity, and linked support requests. We may retain limited information where required by law, to resolve disputes, prevent abuse, or meet financial and tax obligations (for example, subscription transaction records held by the app store). Deletion requests are typically processed within 30 days; some backup copies may persist for a limited additional period. Deleting your account does not automatically cancel an app-store subscription — also cancel it in your store settings. See our data deletion page.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, notify account holders.

Contact us

Privacy, general & technical support: help@sprylearning.com.au
Schools, coordinators & licensing: hello@sprylearning.com.au

You can also visit our support page. SpryLearning operates at sprylearning.com.au.